Live data from Hacker News

GrapheneOS – Break Free from Google and Apple

blog.tomaszdunia.pl

121–130 of 967 posts

Re: GrapheneOS – Break Free from Google and Apple

#121
post #26
post #8

"Break Free from Android and iOS" looks inside - Android

It should probably be "break free from Google and Apple"?

As long as it is based on AOSP, it is at the mercy of Google to release source code and updates. Given recent trends, I wouldn't be surprised if Google stops shipping Android source completely.

Re: GrapheneOS – Break Free from Google and Apple

#122

Earlier quoted context omitted.

I also disagree with that, I trust my Linux distribution to behave well much more than I trust any Android platform and it doesn't even have much app sandboxing at all. You can't fix a lack of trust like you have in Android with technical solutions. The flaw in Android is fundamentally a social problem.

That reads more as sports team flag wavey thoughts and feelings trust than anything actually backed by objective data.

That's the difference between trusted computing (Linux distribution) and untrusted computing (Android).

If you want something backed by objective data, my phone has an advertising ID built in the OS and my laptop doesn't. My phone had 100s of privacy scandals and my laptop doesn't have one.

I do applaud GrapheneOS don't get me wrong but I have a feeling that they are fighting a losing battle.

Re: GrapheneOS – Break Free from Google and Apple

#123
post #25

Earlier quoted context omitted.

>Because google actually cares about hardware and software security. That statement might not have aged so well, especially consindering googles attempt to lock out apps from their devices, If the developers do not comply with being oficially registered.

Don't mix security and freedom. They're commonly opposed to each other.

This is true, I don't get the downvotes.

Re: GrapheneOS – Break Free from Google and Apple

#124
post #56

Earlier quoted context omitted.

When there isn't a perfect solution, the next best thing is... the next best thing :-).

Unless the next best thing makes you think you are already achieving the "perfect solution" for what you think you care about, but in truth does not. I'm not a mobile phone security expert but my feeling is that in the case of GrapheneOS - which target is probably high-profile people at risk of state actors et similia attacks - a zero-day in the closed source firmware from Qualcomm will probably screw you anyway. I u…

So no, their target is people who marginally care about privacy and security but don't want to use iOS. I don't think they target any particular demographic but I see security engineers and activists among users.

And it's not only security - simple stuff like USB data off unless the phone is unlocked, native call recording, much enhanced user profiles (to separate data mining apps like Uber or Instagram from your financial affairs), etc.

And yes, it's about reducing the attack vector. On most other handsets you'll get most of the fixes 6 months or a year later. At best.

Re: GrapheneOS – Break Free from Google and Apple

#125

GrapheneOS' approach is to focus more on security than privacy, because they believe increased security leads to increased privacy. Unfortunately, that means their hardware requirements pretty much limit the hardware that you can run it on (currently only the Pixel phone range). Worse, it also means they stop supporting a device when it reaches End-Of-Life as software security updates stop for it (see How long can Gr…

I'm not sure I fully understand this.

Why are GrapheneOS releases dependant on Google releases?

Re: GrapheneOS – Break Free from Google and Apple

#126

I've been using GrapheneOS for about 3 years now. For the most part, it works very well. I don't have any issues with banking apps, nor any other closed source apps. I'm using two profiles both with sandboxed Google play installed. I'm logged in into my private Google account on the work profile. However, there was one case that lead me to thinking about ditching grapheneos to this day. I installed Uber on my phone a…

Uber works in browser on mobile (and desktop). Last I checked lift did not.

Re: GrapheneOS – Break Free from Google and Apple

#128

GrapheneOS' approach is to focus more on security than privacy, because they believe increased security leads to increased privacy. Unfortunately, that means their hardware requirements pretty much limit the hardware that you can run it on (currently only the Pixel phone range). Worse, it also means they stop supporting a device when it reaches End-Of-Life as software security updates stop for it (see How long can Gr…

The whole reason why GrapheneOS is superior to its alternative is because they do all that.

I also with they could support non-Google phones, but that's a problem coming from the manufacturers, not from GrapheneOS.

My understanding is that there are close to half a million GrapheneOS users. And many potential users don't want to buy a Google phone. So it feels like it is starting to become worth considering for manufacturers...

I don't get why Fairphone doesn't look into that. Is it because they are not aware, or is it too hard for them to make hardware that is compliant with what GrapheneOS requires? Hundreds of thousands of devices may not count so much for Samsung, but they must definitely count for Fairphone.

Re: GrapheneOS – Break Free from Google and Apple

#129

Been using this for about a year on a p9 pro. It works very well. I hear the google tap to pay does not work, but I've never tried it. However Vipps with their tap to pay works fine. BankID works but not with biometric login, which some things require IIRC. And for some reason DnB private works fine, but you are not allowed in on the corp app. It's mind boggingly stupid that they lock down apps like this, when you ca…

I was the one that submitted the DNB Bedrift app report to the sec dev repo! I contacted DNB but they never responded to my email. I wonder if we can find a dev? I believe that's how the private app got fixed.

Want to use Vipps tæpp so much but I have Nordea for private and they don't allow it on their cards, for whatever godforsaken reason.

Re: GrapheneOS – Break Free from Google and Apple

#130

GrapheneOS' approach is to focus more on security than privacy, because they believe increased security leads to increased privacy. Unfortunately, that means their hardware requirements pretty much limit the hardware that you can run it on (currently only the Pixel phone range). Worse, it also means they stop supporting a device when it reaches End-Of-Life as software security updates stop for it (see How long can Gr…

I'm not sure I fully understand this. Why are GrapheneOS releases dependant on Google releases?

They are dependent on the AOSP releases (which Google develops) and on the manufacturer updates (and because GrapheneOS runs on Pixels, then it goes back to Google again).
Post reply on HN